last executing test programs: 2.397222669s ago: executing program 3 (id=2366): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r2, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.393922083s ago: executing program 3 (id=2369): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000080)=""/65, 0x41}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x3}, 0x1}], 0x1, 0x30, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[], 0x2c}}, 0x0) 1.488838262s ago: executing program 3 (id=2398): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYBLOB="7fd91d522433a1f5198516cb8ef36d5b3f6b068da48d1e9fb11134df", @ANYRESOCT=r1], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000740)) poll(&(0x7f0000000040), 0x55, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c009ee3bceeb779f97405000000000000009497618848e90cf511f56a140a93b5a912575c9b7d902a85c84e264d76832f071999234313c4e9ba0e81b84e895bd564c8fed97d65c85c2e87dd9e5c5a969e88ccc96cd9d4e2098f81ad41eb969e68b7e30b89a33b450b40d67ce36aed134baf9d76da81162f22a68b5b0c7ea9cda154cb0327d77be594ca950dabff70437c04e481908d664305418c25e39cbf93f7d41dd5aa9ecf3de3ce78763256a09643370df7d1ae03ef54838df29119a22dddb379cbe898932d57a7b7612bc7d822f6f25fd959d3b95dca6443e15118b80475e5151ce884927bcc5ffebc36aef49902995c7434624734b64f17f397d79e08272ea21da8bd454bba57413305dded39c22560cc1bdca84d6db65c21def4b9eba1", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf250f0000000c00990008000000370000000a003400010101010101000028001b800400030004000200050001002200000004000200050001002800000005000100390000000800a500000000004000a6800a00060008021100000100000a000600ffffffffffff"], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.48851327s ago: executing program 3 (id=2399): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)}], 0x1}}], 0x2, 0x4048010) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000003, 0x8) write(r5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 1.420027665s ago: executing program 3 (id=2400): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) openat$ttynull(0xffffff9c, 0x0, 0x400, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@updsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@remote}, {@in6=@private1, 0x2000000, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1, 0x0, [@dev]}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.419832719s ago: executing program 2 (id=2401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x17, 0x5e, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0xce, 0x0}, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1.348353788s ago: executing program 2 (id=2403): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.348211856s ago: executing program 2 (id=2404): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0xa, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 1.270290328s ago: executing program 2 (id=2405): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec0", 0xc3}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6afaab141dfb71370", 0x37}, {&(0x7f0000000480)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e43732", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d5", 0x44}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b03", 0x4c}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab795", 0x24}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 538.31028ms ago: executing program 3 (id=2411): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, &(0x7f00000000c0)=@abs, 0x0, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 420.638394ms ago: executing program 2 (id=2414): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004380)=@newtfilter={0x60, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x9, 0xaece, 0x3, 0x5}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) 278.677618ms ago: executing program 1 (id=2415): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000020a01040000000000000000050000050c00044000000000000000010900010073797a3000000000140000001100000000000000000500000acdb26d63a9ae50e85a76a942e7d47fd77e608cb41171f8f9c7c56971cab45b7da9642c5b2d1df4e7"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}], 0x4, 0x0, 0x0, 0xa6}}], 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 277.805031ms ago: executing program 2 (id=2417): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000380)="8600000092b85b91c6a33b2dd4da73851ae8fd2d8baccc616bdaf1cf", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 277.41585ms ago: executing program 1 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[], 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0xb8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 277.206979ms ago: executing program 0 (id=2419): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8750a754ac0000003c0012800b000100697036746e6c", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 228.144956ms ago: executing program 1 (id=2420): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 227.549721ms ago: executing program 0 (id=2421): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f91", 0xb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c", 0xa9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b", 0x60}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625", 0x39}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb7", 0x7a}, {0x0}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 150.099584ms ago: executing program 0 (id=2422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 149.7029ms ago: executing program 0 (id=2423): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53073df328509806e960c2", 0x7e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec0", 0xc3}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b417227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1b", 0x3f}, {&(0x7f00000003c0)="9059c5aee5eca0529f3f9109a29885942349a08c6be8241fb9050c7491a49f89ee4aa8a1f1daa6663945ed017834c6afaab141dfb71370", 0x37}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0", 0x78}], 0x6}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e43732", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d5", 0x44}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b03", 0x4c}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab795", 0x24}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 87.896806ms ago: executing program 1 (id=2424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@remote, @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x0, 0x3fff}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x1, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x35}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x4004041) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0137014010ff"}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000040)=""/118, &(0x7f00000000c0)=0x76) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) close(r1) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 87.412792ms ago: executing program 0 (id=2425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x17, 0x5e, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0xce, 0x0}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 87.277963ms ago: executing program 1 (id=2426): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000020a01040000000000000000050000050c00044000000000000000010900010073797a3000000000140000001100000000000000000500000acdb26d63a9ae50e85a76a942e7d47fd77e608cb41171f8f9c7c56971cab45b7da9642c5b2d1df4e7"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}], 0x4, 0x0, 0x0, 0xa6}}], 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 85.913418ms ago: executing program 0 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004380)=@newtfilter={0x60, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa, 0x3, 0x6}, {0x9, 0xaece, 0x3, 0x5}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40) 0s ago: executing program 1 (id=2428): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "39959e3e5f1195f38198c9c1188ead19"}, @fastopen={0x22, 0x2}, @nop, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @md5sig={0x13, 0x12, "6507a7a66980f31377d5a387917edd1d"}]}}}}}}}, 0x0) 0s ago: executing program 0 (id=2429): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000500)="c1de6d7233a30dc5a0ac84df9225d4325a15a7295cf7e6df47390d5db02c64d88b844ff1427d351f48a4ee972e301f7d400bf2477dff5ebaac66161928c38e510398d46a398f38d1c8b8a3c60b42f680764d90379445541ca10a19abe4d5248c9825e0ecc59bbd10723a2addf3dd6766e76d57027ab42d4c2c7b0132782314c5c321bc6cae3b9cd1", 0x88) kernel console output (not intermixed with test programs): m="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.273801][ T40] audit: type=1400 audit(1743783107.350:159): avc: denied { accept } for pid=6063 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.279675][ T40] audit: type=1400 audit(1743783107.350:160): avc: denied { write } for pid=6063 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.285162][ T40] audit: type=1400 audit(1743783107.350:161): avc: denied { read } for pid=6063 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.290247][ T40] audit: type=1400 audit(1743783107.350:162): avc: denied { ioctl } for pid=6063 comm="syz.1.15" path="socket:[8471]" dev="sockfs" ino=8471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.339767][ T40] audit: type=1400 audit(1743783107.440:163): avc: denied { create } for pid=6067 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.347008][ T40] audit: type=1400 audit(1743783107.440:164): avc: denied { create } for pid=6067 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.354424][ T40] audit: type=1400 audit(1743783107.440:165): avc: denied { setopt } for pid=6067 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.035525][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.455951][ T5949] Bluetooth: hci0: command tx timeout [ 52.456793][ T5940] Bluetooth: hci3: command tx timeout [ 52.458066][ T5949] Bluetooth: hci1: command tx timeout [ 52.459809][ T5940] Bluetooth: hci2: command tx timeout [ 53.236420][ T6129] warning: `syz.0.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.576798][ T6154] evm: overlay not supported [ 53.949594][ T6179] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 53.993133][ T6179] veth3: entered promiscuous mode [ 54.191097][ T6188] Zero length message leads to an empty skb [ 54.535401][ T5940] Bluetooth: hci2: command tx timeout [ 54.546661][ T5949] Bluetooth: hci0: command tx timeout [ 54.548411][ T5940] Bluetooth: hci1: command tx timeout [ 54.550170][ T5948] Bluetooth: hci3: command tx timeout [ 55.248742][ T6230] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 55.398280][ T6230] veth3: entered promiscuous mode [ 56.403339][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 56.403350][ T40] audit: type=1400 audit(1743783112.500:201): avc: denied { relabelfrom } for pid=6356 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 56.412511][ T40] audit: type=1400 audit(1743783112.500:202): avc: denied { relabelto } for pid=6356 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.249048][ T6389] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 57.286881][ T6389] veth3: entered promiscuous mode [ 57.627790][ T40] audit: type=1400 audit(1743783113.730:203): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.768917][ T40] audit: type=1400 audit(1743783113.870:204): avc: denied { write } for pid=6418 comm="syz.0.174" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.785718][ T6417] syzkaller0: entered allmulticast mode [ 58.435319][ T6423] tap0: tun_chr_ioctl cmd 1074025677 [ 58.436993][ T6423] tap0: linktype set to 821 [ 58.544415][ T40] audit: type=1400 audit(1743783114.640:205): avc: denied { create } for pid=6443 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.644956][ T40] audit: type=1400 audit(1743783114.650:206): avc: denied { setopt } for pid=6443 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.909630][ T6462] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 59.110434][ T6462] veth5: entered promiscuous mode [ 59.758323][ T40] audit: type=1400 audit(1743783115.860:207): avc: denied { read write } for pid=6495 comm="syz.2.209" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.764989][ T40] audit: type=1400 audit(1743783115.860:208): avc: denied { open } for pid=6495 comm="syz.2.209" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.772616][ T40] audit: type=1400 audit(1743783115.860:209): avc: denied { map } for pid=6495 comm="syz.2.209" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.780241][ T40] audit: type=1400 audit(1743783115.860:210): avc: denied { execute } for pid=6495 comm="syz.2.209" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.885139][ T5984] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.999082][ T6502] netlink: 96 bytes leftover after parsing attributes in process `syz.2.210'. [ 60.044967][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 60.050116][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.054586][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.057630][ T5984] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= c.00 [ 60.060908][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.067356][ T5984] usb 5-1: config 0 descriptor?? [ 60.100586][ T5984] usbhid 5-1:0.0: can't add hid device: -22 [ 60.108021][ T5984] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 60.305375][ T5974] usb 5-1: USB disconnect, device number 2 [ 60.965338][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 60.968608][ T6520] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 61.896865][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 61.896875][ T40] audit: type=1400 audit(1743783118.000:218): avc: denied { read write } for pid=6534 comm="syz.1.223" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 61.906355][ T40] audit: type=1400 audit(1743783118.000:219): avc: denied { open } for pid=6534 comm="syz.1.223" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.207987][ T6541] veth5: entered promiscuous mode [ 62.254853][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.404790][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 62.412056][ T57] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 62.417811][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.421065][ T57] usb 6-1: Product: syz [ 62.422839][ T57] usb 6-1: Manufacturer: syz [ 62.424886][ T57] usb 6-1: SerialNumber: syz [ 62.430528][ T57] usb 6-1: config 0 descriptor?? [ 62.435456][ T57] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 63.751869][ T40] audit: type=1400 audit(1743783119.850:220): avc: denied { bind } for pid=6578 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.760712][ T40] audit: type=1400 audit(1743783119.850:221): avc: denied { write } for pid=6578 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.849479][ T57] gspca_topro: Sensor cx0342 [ 63.897764][ T6584] veth5: entered promiscuous mode [ 64.056262][ T57] usb 6-1: USB disconnect, device number 2 [ 64.721027][ T6609] veth3: entered promiscuous mode [ 65.114801][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.122275][ T40] audit: type=1400 audit(1743783121.220:222): avc: denied { getopt } for pid=6639 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.274725][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 65.279918][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.283069][ T57] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.287629][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.295290][ T57] usb 5-1: config 0 descriptor?? [ 65.377342][ T6664] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 65.380262][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 65.505842][ T57] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.637917][ T40] audit: type=1400 audit(1743783121.740:223): avc: denied { connect } for pid=6670 comm="syz.1.284" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.662399][ T40] audit: type=1400 audit(1743783121.740:224): avc: denied { write } for pid=6670 comm="syz.1.284" laddr=172.20.20.10 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.021373][ T24] usb 5-1: USB disconnect, device number 3 [ 66.166490][ T40] audit: type=1400 audit(1743783122.270:225): avc: denied { read } for pid=6683 comm="syz.2.289" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.174325][ T40] audit: type=1400 audit(1743783122.270:226): avc: denied { open } for pid=6683 comm="syz.2.289" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.183946][ T40] audit: type=1400 audit(1743783122.270:227): avc: denied { ioctl } for pid=6683 comm="syz.2.289" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.197081][ T6686] netlink: 300 bytes leftover after parsing attributes in process `syz.3.290'. [ 66.288720][ T6688] team0 (unregistering): Port device team_slave_0 removed [ 66.293945][ T6688] team0 (unregistering): Port device team_slave_1 removed [ 66.376513][ T5948] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 66.378927][ T5948] Bluetooth: hci3: Injecting HCI hardware error event [ 66.381484][ T5940] Bluetooth: hci3: hardware error 0x00 [ 66.623022][ T6713] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 66.625442][ T6713] netlink: 228 bytes leftover after parsing attributes in process `syz.3.302'. [ 66.832226][ T6725] veth3: entered promiscuous mode [ 66.841133][ T6727] netlink: 'syz.0.303': attribute type 4 has an invalid length. [ 66.937231][ T6727] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 67.470735][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 67.470786][ T40] audit: type=1400 audit(1743783123.570:238): avc: denied { bind } for pid=6742 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.486644][ T6745] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 67.489105][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.314'. [ 67.545504][ T6745] team0: Port device geneve0 added [ 67.626857][ T40] audit: type=1400 audit(1743783123.730:239): avc: denied { write } for pid=6742 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.634255][ T6745] CUSE: unknown device info "ÿ" [ 67.635942][ T6745] CUSE: zero length info key specified [ 68.454734][ T5940] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 68.504096][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 68.678348][ T40] audit: type=1400 audit(1743783124.780:240): avc: denied { mounton } for pid=6785 comm="syz.1.330" path="/72/file1" dev="tmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.680749][ T6786] syz.1.330: attempt to access beyond end of device [ 68.680749][ T6786] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 68.688523][ T6786] syz.1.330: attempt to access beyond end of device [ 68.688523][ T6786] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 68.692013][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.695278][ T6786] syz.1.330: attempt to access beyond end of device [ 68.695278][ T6786] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 68.699264][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.703267][ T6786] syz.1.330: attempt to access beyond end of device [ 68.703267][ T6786] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 68.707939][ T6786] syz.1.330: attempt to access beyond end of device [ 68.707939][ T6786] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 68.711969][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.715495][ T6786] syz.1.330: attempt to access beyond end of device [ 68.715495][ T6786] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 68.720114][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.723715][ T6786] syz.1.330: attempt to access beyond end of device [ 68.723715][ T6786] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 68.728714][ T6786] syz.1.330: attempt to access beyond end of device [ 68.728714][ T6786] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 68.733345][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.736878][ T6786] syz.1.330: attempt to access beyond end of device [ 68.736878][ T6786] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 68.740984][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.743935][ T6786] syz.1.330: attempt to access beyond end of device [ 68.743935][ T6786] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 68.748487][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.751132][ T6786] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.753757][ T6786] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 68.775165][ T5940] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 68.777688][ T5940] Bluetooth: hci0: Injecting HCI hardware error event [ 68.780483][ T5940] Bluetooth: hci0: hardware error 0x00 [ 68.834948][ T5982] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.994742][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 68.997840][ T5982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 69.000957][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.003825][ T5982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.006769][ T5982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.010403][ T5982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.013397][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.220574][ T5982] usb 7-1: GET_CAPABILITIES returned 0 [ 69.222158][ T5982] usbtmc 7-1:16.0: can't read capabilities [ 69.359501][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 69.422635][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 69.426531][ T6778] usbtmc 7-1:16.0: Unable to send data, error -71 [ 69.429088][ T57] usb 7-1: USB disconnect, device number 3 [ 69.960248][ T6822] overlayfs: failed to resolve './file1': -2 [ 70.193323][ T6836] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.519836][ T6852] overlayfs: failed to resolve './file1': -2 [ 70.854796][ T5940] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 70.996154][ T40] audit: type=1400 audit(1743783127.100:241): avc: denied { read write } for pid=6864 comm="syz.2.362" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.003355][ T40] audit: type=1400 audit(1743783127.100:242): avc: denied { open } for pid=6864 comm="syz.2.362" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.188602][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190547][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.684403][ T40] audit: type=1400 audit(1743783127.780:243): avc: denied { getopt } for pid=6878 comm="syz.0.367" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.827137][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 72.024945][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 72.030502][ T34] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 72.033115][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.035627][ T34] usb 6-1: Product: syz [ 72.036830][ T34] usb 6-1: Manufacturer: syz [ 72.038124][ T34] usb 6-1: SerialNumber: syz [ 72.040579][ T34] usb 6-1: config 0 descriptor?? [ 72.048471][ T34] usb 6-1: selecting invalid altsetting 3 [ 72.050170][ T34] comedi comedi0: could not set alternate setting 3 in high speed [ 72.052345][ T34] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 72.057706][ T34] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 72.244490][ T40] audit: type=1400 audit(1743783128.340:244): avc: denied { map } for pid=6902 comm="syz.2.376" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.255220][ T40] audit: type=1400 audit(1743783128.340:245): avc: denied { read write } for pid=6902 comm="syz.2.376" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.256714][ T6012] usb 6-1: USB disconnect, device number 3 [ 72.987281][ T40] audit: type=1400 audit(1743783129.090:246): avc: denied { bind } for pid=6920 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.993291][ T40] audit: type=1400 audit(1743783129.090:247): avc: denied { name_bind } for pid=6920 comm="syz.1.381" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.002139][ T40] audit: type=1400 audit(1743783129.090:248): avc: denied { node_bind } for pid=6920 comm="syz.1.381" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.156335][ T40] audit: type=1400 audit(1743783129.260:249): avc: denied { append } for pid=6937 comm="syz.3.387" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.156464][ T6938] usb usb1: usbfs: process 6938 (syz.3.387) did not claim interface 0 before use [ 73.764606][ T6964] overlayfs: failed to resolve './file1': -2 [ 73.917469][ T6975] ======================================================= [ 73.917469][ T6975] WARNING: The mand mount option has been deprecated and [ 73.917469][ T6975] and is ignored by this kernel. Remove the mand [ 73.917469][ T6975] option from the mount to silence this warning. [ 73.917469][ T6975] ======================================================= [ 74.163167][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'. [ 74.193520][ T6982] veth5: entered promiscuous mode [ 74.232908][ T6986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.276925][ T6988] overlayfs: failed to resolve './file1': -2 [ 74.598735][ T7011] overlayfs: failed to resolve './file0': -2 [ 74.761199][ T40] audit: type=1400 audit(1743783130.860:250): avc: denied { getopt } for pid=7015 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.638576][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 75.652316][ T7042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.697637][ T40] audit: type=1400 audit(1743783131.800:251): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.744087][ T7042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.845880][ T7042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.960333][ T7042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.044889][ T7042] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.051765][ T7042] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.061241][ T7042] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.072504][ T7042] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194498][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 76.214703][ T7056] veth5: entered promiscuous mode [ 76.773357][ T40] audit: type=1400 audit(1743783132.870:252): avc: denied { create } for pid=7063 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.238706][ T7075] usb usb8: usbfs: process 7075 (syz.0.445) did not claim interface 0 before use [ 77.294567][ T40] audit: type=1400 audit(1743783133.390:253): avc: denied { read } for pid=7079 comm="syz.0.447" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.298173][ T7080] input: syz0 as /devices/virtual/input/input5 [ 77.303210][ T40] audit: type=1400 audit(1743783133.390:254): avc: denied { open } for pid=7079 comm="syz.0.447" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.309915][ T40] audit: type=1400 audit(1743783133.400:255): avc: denied { ioctl } for pid=7079 comm="syz.0.447" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.546917][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 77.550734][ T7088] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.615502][ T7088] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.677090][ T7090] veth0_vlan: entered allmulticast mode [ 77.696524][ T7088] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.702133][ T7090] veth0_vlan: left promiscuous mode [ 77.706458][ T7090] veth0_vlan: entered promiscuous mode [ 77.789528][ T7088] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.813191][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 78.813207][ T40] audit: type=1400 audit(1743783134.910:260): avc: denied { create } for pid=7101 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.174632][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 79.748964][ T40] audit: type=1400 audit(1743783135.850:261): avc: denied { setopt } for pid=7124 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.751381][ T7126] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 79.758086][ T7126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.463'. [ 79.766659][ T7126] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 79.788681][ T40] audit: type=1400 audit(1743783135.890:262): avc: denied { listen } for pid=7124 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.689230][ T7139] input: syz0 as /devices/virtual/input/input6 [ 81.164631][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.191006][ T7145] veth5: entered promiscuous mode [ 81.197167][ T7145] bond1: (slave veth5): Enslaving as an active interface with an up link [ 81.296612][ T7088] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.311156][ T7088] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.321145][ T7088] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.332556][ T7088] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.418290][ T63] cfg80211: failed to load regulatory.db [ 82.444226][ T7182] input: syz0 as /devices/virtual/input/input7 [ 82.579012][ T7188] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 82.579053][ T40] audit: type=1400 audit(1743783138.680:263): avc: denied { ioctl } for pid=7184 comm="syz.0.488" path="socket:[12936]" dev="sockfs" ino=12936 ioctlcmd=0x8995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.590195][ T40] audit: type=1400 audit(1743783138.690:264): avc: denied { getopt } for pid=7184 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.613121][ T40] audit: type=1400 audit(1743783138.710:265): avc: denied { create } for pid=7186 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.625698][ T40] audit: type=1400 audit(1743783138.710:266): avc: denied { setopt } for pid=7186 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.357951][ T40] audit: type=1400 audit(1743783139.460:267): avc: denied { bind } for pid=7198 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.363205][ T40] audit: type=1400 audit(1743783139.460:268): avc: denied { read } for pid=7198 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.215866][ T7224] overlayfs: failed to clone upperpath [ 84.280592][ T40] audit: type=1400 audit(1743783140.380:269): avc: denied { ioctl } for pid=7227 comm="syz.1.506" path="socket:[14474]" dev="sockfs" ino=14474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.417717][ T40] audit: type=1400 audit(1743783140.520:270): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.906987][ T7258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.932704][ T7258] veth7: entered promiscuous mode [ 84.937510][ T7258] bond2: (slave veth7): Enslaving as an active interface with an up link [ 85.741612][ T40] audit: type=1400 audit(1743783141.840:271): avc: denied { read write } for pid=7288 comm="syz.3.531" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.749304][ T40] audit: type=1400 audit(1743783141.840:272): avc: denied { open } for pid=7288 comm="syz.3.531" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.974835][ T7320] lo speed is unknown, defaulting to 1000 [ 85.977279][ T7320] lo speed is unknown, defaulting to 1000 [ 85.980767][ T7320] lo speed is unknown, defaulting to 1000 [ 85.985059][ T7320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.990970][ T7320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.006122][ T7320] lo speed is unknown, defaulting to 1000 [ 86.008797][ T7320] lo speed is unknown, defaulting to 1000 [ 86.011012][ T7320] lo speed is unknown, defaulting to 1000 [ 86.013231][ T7320] lo speed is unknown, defaulting to 1000 [ 86.042318][ T40] audit: type=1400 audit(1743783142.140:273): avc: denied { write } for pid=7328 comm="syz.0.550" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 86.186059][ T7336] capability: warning: `syz.3.553' uses deprecated v2 capabilities in a way that may be insecure [ 86.197523][ T40] audit: type=1400 audit(1743783142.300:274): avc: denied { rename } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.203231][ T40] audit: type=1400 audit(1743783142.300:275): avc: denied { unlink } for pid=5337 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.209899][ T40] audit: type=1400 audit(1743783142.300:276): avc: denied { create } for pid=5337 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.375006][ T7348] Illegal XDP return value 4294967294 on prog (id 157) dev N/A, expect packet loss! [ 86.803176][ T40] audit: type=1400 audit(1743783142.900:277): avc: denied { read } for pid=7358 comm="syz.2.563" path="socket:[13176]" dev="sockfs" ino=13176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.176893][ T40] audit: type=1400 audit(1743783143.280:278): avc: denied { write } for pid=7374 comm="syz.0.568" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.463077][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 87.670485][ T7385] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 88.988845][ T7431] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.201196][ T7447] fuse: Bad value for 'fd' [ 89.971048][ T7459] siw: device registration error -23 [ 90.071471][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 90.084373][ T7469] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.161989][ T7469] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.267980][ T7469] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.445846][ T7469] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.476725][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 90.476735][ T40] audit: type=1400 audit(1743783146.580:283): avc: denied { connect } for pid=7479 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.493230][ T7480] bond0: entered promiscuous mode [ 90.495933][ T7480] bond_slave_0: entered promiscuous mode [ 90.497687][ T7480] bond_slave_1: entered promiscuous mode [ 90.510801][ T7469] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.529089][ T7469] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.538326][ T7469] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.545690][ T7469] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.586686][ T7493] input: syz0 as /devices/virtual/input/input8 [ 90.692256][ T7499] veth0_vlan: entered allmulticast mode [ 90.776897][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 90.789719][ T40] audit: type=1400 audit(1743783146.880:284): avc: denied { create } for pid=7505 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.802296][ T40] audit: type=1400 audit(1743783146.880:285): avc: denied { write } for pid=7505 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.823634][ T40] audit: type=1400 audit(1743783146.890:286): avc: denied { read } for pid=7505 comm="syz.1.620" path="socket:[16426]" dev="sockfs" ino=16426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.911713][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'. [ 90.918752][ T7514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.968179][ T7514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.016206][ T7519] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 91.038203][ T7514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.101103][ T7514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.620937][ T40] audit: type=1400 audit(1743783147.720:287): avc: denied { create } for pid=7526 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.490139][ T1182] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 92.678041][ T7549] veth0_vlan: entered allmulticast mode [ 93.024916][ T5940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 93.028042][ T5940] Bluetooth: hci2: Injecting HCI hardware error event [ 93.032766][ T5940] Bluetooth: hci2: hardware error 0x00 [ 93.086819][ T7556] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 93.563393][ T7571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.566391][ T7571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.754324][ T7583] veth9: entered promiscuous mode [ 93.875611][ T40] audit: type=1400 audit(1743783149.980:288): avc: denied { read } for pid=7589 comm="syz.2.653" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.884169][ T40] audit: type=1400 audit(1743783149.980:289): avc: denied { open } for pid=7589 comm="syz.2.653" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.893326][ T40] audit: type=1400 audit(1743783149.980:290): avc: denied { ioctl } for pid=7589 comm="syz.2.653" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.031607][ T7594] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 94.470079][ T40] audit: type=1400 audit(1743783150.570:291): avc: denied { create } for pid=7597 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.478922][ T40] audit: type=1400 audit(1743783150.570:292): avc: denied { create } for pid=7597 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.934748][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 94.967940][ T7514] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.976553][ T7514] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.982852][ T7514] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.990579][ T7514] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.094825][ T5940] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 95.329683][ T7625] syz.1.667 uses obsolete (PF_INET,SOCK_PACKET) [ 95.418095][ T7631] fuse: Bad value for 'fd' [ 95.503602][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 95.508216][ T7637] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.559585][ T7637] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.617963][ T7637] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.698591][ T7637] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.917443][ T7647] veth7: entered promiscuous mode [ 96.807727][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 96.938991][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 96.963407][ T7681] veth9: entered promiscuous mode [ 96.971266][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 96.971277][ T40] audit: type=1400 audit(1743783153.070:294): avc: denied { connect } for pid=7684 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.027577][ T7689] siw: device registration error -23 [ 97.373920][ T40] audit: type=1400 audit(1743783153.470:295): avc: denied { write } for pid=7705 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.664876][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 97.693249][ T7715] veth7: entered promiscuous mode [ 97.927189][ T40] audit: type=1400 audit(1743783154.030:296): avc: denied { create } for pid=7726 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.934382][ T40] audit: type=1400 audit(1743783154.030:297): avc: denied { link } for pid=7726 comm="syz.3.714" name="file0" dev="tmpfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.999515][ T7637] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009536][ T7637] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.016811][ T7637] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.023220][ T7637] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.059291][ T7761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.728'. [ 99.062727][ T7761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.728'. [ 99.069348][ T7761] netlink: 'syz.1.728': attribute type 5 has an invalid length. [ 99.072354][ T7761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.728'. [ 99.129762][ T7757] veth0_vlan: left promiscuous mode [ 99.134875][ T7757] veth0_vlan: entered promiscuous mode [ 99.301578][ T7774] Bluetooth: MGMT ver 1.23 [ 99.925815][ T7778] overlayfs: missing 'workdir' [ 99.972482][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 99.979394][ T7784] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.993772][ T7787] siw: device registration error -23 [ 100.048893][ T7784] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.177641][ T7784] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.269385][ T7784] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.030241][ T7808] overlayfs: missing 'workdir' [ 101.151426][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 101.227687][ T7824] veth3: entered promiscuous mode [ 101.719022][ T40] audit: type=1400 audit(1743783157.820:298): avc: denied { read } for pid=7831 comm="syz.2.755" path="socket:[15953]" dev="sockfs" ino=15953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.782864][ T40] audit: type=1400 audit(1743783157.880:299): avc: denied { ioctl } for pid=7831 comm="syz.2.755" path="socket:[14056]" dev="sockfs" ino=14056 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.045176][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.762'. [ 103.123444][ T7854] veth3: entered promiscuous mode [ 103.298156][ T7784] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.305119][ T7784] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.312774][ T7784] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.323961][ T7784] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.621430][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 103.647382][ T7878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.708120][ T7880] veth0_vlan: entered allmulticast mode [ 103.790411][ T7881] veth0_vlan: left promiscuous mode [ 103.794321][ T7881] veth0_vlan: entered promiscuous mode [ 103.831207][ T7878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.903028][ T7878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.007995][ T7878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.102180][ T7878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.112686][ T7878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.120802][ T7878] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.128309][ T7878] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.244750][ T7882] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.396182][ T7882] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 104.398880][ T7882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.408856][ T7882] usb 5-1: config 0 descriptor?? [ 104.412394][ T7882] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 105.268414][ T40] audit: type=1400 audit(1743783161.370:300): avc: denied { mount } for pid=7905 comm="syz.2.782" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 105.819746][ T7882] gspca_stv06xx: HDCS-1020 sensor detected [ 105.992641][ T5940] Bluetooth: hci1: Malformed Event: 0x13 [ 106.075584][ T7882] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 106.081683][ T7882] usb 5-1: USB disconnect, device number 4 [ 106.444796][ T5982] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 106.804774][ T5982] usb 8-1: Using ep0 maxpacket: 16 [ 106.808207][ T5982] usb 8-1: config 0 has an invalid interface number: 145 but max is 0 [ 106.811548][ T5982] usb 8-1: config 0 has no interface number 0 [ 106.815925][ T5982] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 106.819377][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.822309][ T5982] usb 8-1: Product: syz [ 106.823841][ T5982] usb 8-1: Manufacturer: syz [ 106.825786][ T5982] usb 8-1: SerialNumber: syz [ 106.828760][ T5982] usb 8-1: config 0 descriptor?? [ 106.831573][ T5982] hub 8-1:0.145: bad descriptor, ignoring hub [ 106.833819][ T5982] hub 8-1:0.145: probe with driver hub failed with error -5 [ 106.838793][ T5982] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.145/input/input9 [ 107.088482][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.092188][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.096604][ T40] audit: type=1400 audit(1743783163.200:301): avc: denied { append } for pid=7921 comm="syz.3.787" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.195163][ T1020] usb 8-1: USB disconnect, device number 2 [ 108.084443][ T40] audit: type=1400 audit(1743783164.120:302): avc: denied { connect } for pid=7976 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.090483][ T40] audit: type=1400 audit(1743783164.120:303): avc: denied { bind } for pid=7976 comm="syz.1.809" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.096869][ T40] audit: type=1400 audit(1743783164.120:304): avc: denied { name_bind } for pid=7976 comm="syz.1.809" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 108.106741][ T40] audit: type=1400 audit(1743783164.120:305): avc: denied { node_bind } for pid=7976 comm="syz.1.809" saddr=fc00:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 108.462890][ T7997] siw: device registration error -23 [ 108.474114][ T40] audit: type=1400 audit(1743783164.570:306): avc: denied { name_bind } for pid=7998 comm="syz.0.819" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.728202][ T40] audit: type=1400 audit(1743783164.830:307): avc: denied { read } for pid=8015 comm="syz.1.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.792382][ T8022] usb 1-1: USB disconnect, device number 2 [ 109.002332][ T8025] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.005650][ T8026] usb usb1: Process 8026 (syz.0.823) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 109.048884][ T8033] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.831'. [ 109.052832][ T8031] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.831'. [ 109.108802][ T40] audit: type=1400 audit(1743783165.210:308): avc: denied { ioctl } for pid=8030 comm="syz.3.831" path="socket:[17620]" dev="sockfs" ino=17620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.172964][ T40] audit: type=1400 audit(1743783165.270:309): avc: denied { bind } for pid=8030 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.274811][ T40] audit: type=1400 audit(1743783166.330:310): avc: denied { map } for pid=8057 comm="syz.3.839" path="socket:[16164]" dev="sockfs" ino=16164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.283102][ T40] audit: type=1400 audit(1743783166.330:311): avc: denied { read } for pid=8057 comm="syz.3.839" path="socket:[16164]" dev="sockfs" ino=16164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.482817][ T40] audit: type=1400 audit(1743783166.580:312): avc: denied { ioctl } for pid=8064 comm="syz.0.842" path="socket:[17670]" dev="sockfs" ino=17670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.490364][ T40] audit: type=1400 audit(1743783166.580:313): avc: denied { bind } for pid=8064 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.591154][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.593813][ T40] audit: type=1400 audit(1743783166.690:314): avc: denied { write } for pid=8066 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.595662][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.704303][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.713438][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.766781][ T8067] veth0_vlan: left allmulticast mode [ 110.821886][ T8067] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.824463][ T8067] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.828057][ T8067] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.831545][ T8067] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.861339][ T8067] veth3: left promiscuous mode [ 110.866935][ T8067] veth5: left promiscuous mode [ 110.956368][ T8099] siw: device registration error -23 [ 111.003776][ T8104] bridge1: entered allmulticast mode [ 111.045942][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 111.516737][ T40] audit: type=1400 audit(1743783167.610:315): avc: denied { listen } for pid=8111 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.523814][ T40] audit: type=1400 audit(1743783167.620:316): avc: denied { setopt } for pid=8111 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.559554][ T8110] usb usb1: usbfs: process 8110 (syz.3.857) did not claim interface 0 before use [ 111.563547][ T8110] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.567117][ T8110] usb usb1: Process 8110 (syz.3.857) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 111.567493][ T40] audit: type=1400 audit(1743783167.670:317): avc: denied { create } for pid=8114 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.601297][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 111.635078][ T8117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.860'. [ 112.388959][ T8146] netlink: 68 bytes leftover after parsing attributes in process `syz.0.871'. [ 112.534306][ T8155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'. [ 112.766359][ T8170] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 112.796952][ T8170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.824260][ T8170] veth5: entered promiscuous mode [ 112.827592][ T8170] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 112.896096][ T40] audit: type=1400 audit(1743783168.990:318): avc: denied { ioctl } for pid=8177 comm="syz.1.885" path="socket:[15331]" dev="sockfs" ino=15331 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.988108][ T8186] netlink: 56 bytes leftover after parsing attributes in process `syz.1.889'. [ 113.053489][ T8187] siw: device registration error -23 [ 113.111577][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 113.161592][ T40] audit: type=1400 audit(1743783169.260:319): avc: denied { ioctl } for pid=8192 comm="syz.1.892" path="socket:[17757]" dev="sockfs" ino=17757 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.417960][ T8199] usb usb1: usbfs: process 8199 (syz.3.895) did not claim interface 0 before use [ 113.425084][ T8199] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.428333][ T8199] usb usb1: Process 8199 (syz.3.895) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 113.567863][ T8207] fuse: Unknown parameter 'grou00000000000000000000' [ 113.777450][ T8216] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 113.843414][ T8220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.859306][ T8220] veth3: entered promiscuous mode [ 113.862431][ T8220] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 113.923481][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 114.480721][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 114.482984][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 114.488413][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 114.490530][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 114.492669][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 114.495030][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 114.498182][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 114.500590][ T6012] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 114.506029][ T6012] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 114.757268][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 114.759794][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'. [ 114.763269][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 114.766830][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 114.928885][ T8253] fuse: Unknown parameter 'group_i00000000000000000000' [ 115.133149][ T8268] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 115.157345][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.180572][ T8268] veth5: entered promiscuous mode [ 115.183991][ T8268] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 115.250137][ T8276] fuse: Unknown parameter 'group_i00000000000000000000' [ 115.572216][ T8299] bridge1: entered allmulticast mode [ 115.632301][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 116.091526][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 116.095901][ T8320] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.147362][ T8320] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.229232][ T8320] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.277926][ T8320] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.358105][ T8320] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.370173][ T8320] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.381786][ T8320] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.393494][ T8332] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 116.393488][ T8320] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.425278][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.438393][ T8339] af_packet: tpacket_rcv: packet too big, clamped from 41 to 4294967272. macoff=96 [ 116.443159][ T8332] veth7: entered promiscuous mode [ 116.454971][ T8332] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 116.462336][ T8341] syzkaller1: entered promiscuous mode [ 116.463971][ T8341] syzkaller1: entered allmulticast mode [ 116.467894][ T8341] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 116.479832][ T8343] tipc: Started in network mode [ 116.481274][ T8343] tipc: Node identity ac14140f, cluster identity 4711 [ 116.484221][ T8343] tipc: New replicast peer: 255.255.255.255 [ 116.487427][ T8343] tipc: Enabled bearer , priority 10 [ 116.490402][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 116.492917][ T8343] tipc: Disabling bearer [ 116.578211][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 116.582374][ T8355] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.601780][ T8357] siw: device registration error -23 [ 116.667360][ T8355] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.728397][ T8355] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.732229][ T8363] fuse: Unknown parameter 'group_id00000000000000000000' [ 116.797540][ T8355] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.900337][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 116.900348][ T40] audit: type=1400 audit(1743783173.000:321): avc: denied { bind } for pid=8376 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.235483][ T40] audit: type=1400 audit(1743783173.340:322): avc: denied { setopt } for pid=8384 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.240889][ T40] audit: type=1400 audit(1743783173.340:323): avc: denied { getopt } for pid=8384 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.873485][ T8398] fuse: Bad value for 'user_id' [ 117.875163][ T8398] fuse: Bad value for 'user_id' [ 118.195860][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 118.367416][ T8426] usb usb1: usbfs: process 8426 (syz.3.993) did not claim interface 0 before use [ 118.371158][ T8426] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.022629][ T8438] sctp: [Deprecated]: syz.2.998 (pid 8438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.022629][ T8438] Use struct sctp_sack_info instead [ 119.039128][ T40] audit: type=1400 audit(1743783175.140:324): avc: denied { attach_queue } for pid=8437 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 119.049881][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'. [ 119.139954][ T8444] fuse: Bad value for 'fd' [ 119.230436][ T8449] siw: device registration error -23 [ 119.373586][ T40] audit: type=1400 audit(1743783175.470:325): avc: denied { create } for pid=8452 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 119.381595][ T40] audit: type=1400 audit(1743783175.470:326): avc: denied { write } for pid=8452 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 120.025860][ T8355] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.036730][ T8355] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.043305][ T8355] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.044986][ T8469] fuse: Bad value for 'fd' [ 120.049838][ T8355] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.086644][ T8474] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 120.118969][ T8474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.548146][ T8474] veth9: entered promiscuous mode [ 120.554473][ T8474] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 120.677181][ T8493] fuse: Bad value for 'fd' [ 120.688573][ T8494] siw: device registration error -23 [ 120.738217][ T8498] __nla_validate_parse: 1 callbacks suppressed [ 120.738228][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 120.744042][ T8498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.828884][ T8498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.908502][ T8498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.980438][ T8498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.070062][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1030'. [ 121.071045][ T8512] fuse: Bad value for 'fd' [ 121.073538][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 121.078923][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1030'. [ 121.082411][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1030'. [ 121.364050][ T8527] veth0_vlan: left promiscuous mode [ 121.371138][ T8527] veth0_vlan: entered promiscuous mode [ 121.662316][ T5940] Bluetooth: hci1: link tx timeout [ 121.664332][ T5940] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.668323][ T5940] Bluetooth: hci1: link tx timeout [ 121.669978][ T5940] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.203152][ T8549] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 122.206834][ T8549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1048'. [ 122.243656][ T8555] fuse: Bad value for 'fd' [ 122.380878][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 123.308957][ T8586] bridge2: entered allmulticast mode [ 123.618236][ T8607] veth0_vlan: entered allmulticast mode [ 123.618289][ T40] audit: type=1400 audit(1743783179.720:327): avc: denied { bind } for pid=8605 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.618498][ T40] audit: type=1400 audit(1743783179.720:328): avc: denied { name_bind } for pid=8605 comm="syz.3.1072" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 123.621373][ T8607] veth0_vlan: left promiscuous mode [ 123.626829][ T40] audit: type=1400 audit(1743783179.720:329): avc: denied { node_bind } for pid=8605 comm="syz.3.1072" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 123.634199][ T8607] veth0_vlan: entered promiscuous mode [ 123.635817][ T40] audit: type=1400 audit(1743783179.740:330): avc: denied { connect } for pid=8605 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.652693][ T40] audit: type=1400 audit(1743783179.740:331): avc: denied { name_connect } for pid=8605 comm="syz.3.1072" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 123.670753][ T40] audit: type=1400 audit(1743783179.740:332): avc: denied { write } for pid=8605 comm="syz.3.1072" laddr=127.0.0.1 lport=40352 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 123.744830][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 124.050279][ T8498] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.059544][ T8498] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.067512][ T8498] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.075713][ T8498] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.139242][ T8615] bridge1: entered allmulticast mode [ 124.205568][ T8619] siw: device registration error -23 [ 124.317210][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 124.375037][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 124.382948][ T8631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.439289][ T8631] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.497990][ T8631] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.500235][ T40] audit: type=1400 audit(1743783180.600:333): avc: denied { create } for pid=8642 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.511919][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1089'. [ 124.547442][ T8631] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.623511][ T8631] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.631351][ T8631] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.634059][ T8660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.636739][ T8660] IPv6: NLM_F_CREATE should be set when creating new route [ 124.643175][ T8631] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.662211][ T8631] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.820841][ T40] audit: type=1400 audit(1743783180.920:334): avc: denied { ioctl } for pid=8676 comm="syz.3.1102" path="socket:[21144]" dev="sockfs" ino=21144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.015060][ T8687] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.081447][ T8687] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.157466][ T8687] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.238387][ T8687] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.428813][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 125.434355][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 125.468095][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 125.470602][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 125.472999][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 125.476194][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 125.478295][ T6012] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x3 [ 125.483083][ T6012] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 125.508069][ T8698] fuse: Unknown parameter 'use00000000000000000000' [ 125.779621][ T8714] tipc: Cannot configure node identity twice [ 125.785194][ T40] audit: type=1400 audit(1743783181.890:335): avc: denied { accept } for pid=8713 comm="syz.1.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.909156][ T8722] veth0_vlan: left promiscuous mode [ 125.912099][ T8722] veth0_vlan: entered promiscuous mode [ 126.286013][ T8726] bridge2: entered allmulticast mode [ 126.426145][ T8732] __nla_validate_parse: 2 callbacks suppressed [ 126.426167][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 126.664489][ T40] audit: type=1400 audit(1743783182.760:336): avc: denied { name_bind } for pid=8747 comm="syz.3.1133" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 126.676904][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1131'. [ 126.680408][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1131'. [ 126.683675][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1131'. [ 126.686836][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1131'. [ 126.709835][ T8751] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1134'. [ 126.760726][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 127.488938][ T8762] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 127.515030][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 127.528454][ T8762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.555966][ T8762] veth7: entered promiscuous mode [ 127.561181][ T8762] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 127.697381][ T8775] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1143'. [ 127.723398][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 127.813055][ T8793] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 127.839331][ T8793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.859506][ T8793] veth7: entered promiscuous mode [ 127.863479][ T8793] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 128.907156][ T8687] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.918216][ T8687] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.929286][ T8687] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.940723][ T8687] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.318853][ T8833] bridge2: entered allmulticast mode [ 130.642166][ T8877] veth0_vlan: left promiscuous mode [ 130.645053][ T8877] veth0_vlan: entered promiscuous mode [ 131.113051][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 131.113068][ T40] audit: type=1400 audit(1743783187.210:339): avc: denied { nlmsg_read } for pid=8903 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.790173][ T8926] siw: device registration error -23 [ 132.240044][ T8945] tipc: Started in network mode [ 132.241453][ T8945] tipc: Node identity ac14140f, cluster identity 4711 [ 132.243424][ T8945] tipc: New replicast peer: 255.255.255.255 [ 132.245687][ T8945] tipc: Enabled bearer , priority 10 [ 132.347112][ T8959] bridge3: entered allmulticast mode [ 132.659872][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.662005][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.700812][ T8971] tipc: New replicast peer: 255.255.255.255 [ 132.703416][ T8971] tipc: Enabled bearer , priority 10 [ 133.019931][ T8981] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 133.035113][ T8981] __nla_validate_parse: 6 callbacks suppressed [ 133.035124][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 133.041280][ T8981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.064328][ T8981] veth9: entered promiscuous mode [ 133.070157][ T8981] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 133.246052][ T57] tipc: Node number set to 2886997007 [ 133.396492][ T9003] netlink: 'syz.2.1233': attribute type 27 has an invalid length. [ 133.695500][ T105] tipc: Node number set to 2886997007 [ 133.763624][ T40] audit: type=1400 audit(1743783189.860:340): avc: denied { execute } for pid=9024 comm="syz.1.1243" path="/310/memory.events" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.774752][ T40] audit: type=1400 audit(1743783189.870:341): avc: denied { accept } for pid=9026 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.856781][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1244'. [ 134.297002][ T9042] fuse: Unknown parameter 'fd00000000000000000000003' [ 134.320344][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 134.352962][ T9044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.437231][ T9044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.519030][ T9044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.597464][ T9044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.751251][ T40] audit: type=1400 audit(1743783190.850:342): avc: denied { connect } for pid=9069 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.759010][ T40] audit: type=1400 audit(1743783190.850:343): avc: denied { bind } for pid=9069 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.760868][ T9044] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.766718][ T40] audit: type=1400 audit(1743783190.860:344): avc: denied { write } for pid=9069 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.777540][ T40] audit: type=1400 audit(1743783190.870:345): avc: denied { read } for pid=9069 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.790798][ T9044] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.799815][ T9044] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.810456][ T9044] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.886345][ T9075] syzkaller1: entered promiscuous mode [ 134.889191][ T9075] syzkaller1: entered allmulticast mode [ 136.002977][ T9098] veth0_vlan: left promiscuous mode [ 136.005107][ T9098] veth0_vlan: entered promiscuous mode [ 136.191640][ T9100] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.278627][ T9100] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.328626][ T9100] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.389547][ T9100] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.477959][ T9100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.485431][ T9100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.492577][ T9100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.501644][ T9100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.611552][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 136.618330][ T9105] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 136.802821][ T9113] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 136.805535][ T9113] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1278'. [ 137.023777][ T9127] veth0_vlan: left promiscuous mode [ 137.026583][ T9127] veth0_vlan: entered promiscuous mode [ 137.800613][ T9141] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 137.812704][ T9133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1287'. [ 137.819627][ T9141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.844438][ T9141] veth11: entered promiscuous mode [ 137.849710][ T9141] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 138.307481][ T9148] tipc: Enabling of bearer rejected, already enabled [ 138.455538][ T9155] siw: device registration error -23 [ 138.778354][ T9161] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1298'. [ 139.049413][ T40] audit: type=1400 audit(1743783195.150:346): avc: denied { write } for pid=9183 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.187764][ T9192] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1309'. [ 139.278457][ T40] audit: type=1400 audit(1743783195.380:347): avc: denied { setopt } for pid=9195 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.287849][ T40] audit: type=1400 audit(1743783195.380:348): avc: denied { write } for pid=9195 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.488527][ T40] audit: type=1400 audit(1743783196.590:349): avc: denied { ioctl } for pid=9256 comm="syz.3.1333" path="socket:[22132]" dev="sockfs" ino=22132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.682414][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 140.710974][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'. [ 140.714420][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 140.718326][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'. [ 140.721333][ T9270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'. [ 141.087613][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 141.127988][ T9284] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 141.145671][ T9284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1345'. [ 141.148502][ T40] audit: type=1400 audit(1743783197.250:350): avc: denied { write } for pid=9283 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.150441][ T9284] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.179271][ T9284] veth11: entered promiscuous mode [ 141.185211][ T9284] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 141.620646][ T9314] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 141.642927][ T9314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1357'. [ 141.647863][ T9314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.668451][ T9314] veth13: entered promiscuous mode [ 141.671764][ T9314] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 142.138064][ T40] audit: type=1400 audit(1743783198.240:351): avc: denied { create } for pid=9339 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.147773][ T40] audit: type=1400 audit(1743783198.250:352): avc: denied { bind } for pid=9339 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.228813][ T40] audit: type=1400 audit(1743783198.330:353): avc: denied { bind } for pid=9339 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.239035][ T40] audit: type=1400 audit(1743783198.330:354): avc: denied { listen } for pid=9339 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.248300][ T40] audit: type=1400 audit(1743783198.330:355): avc: denied { connect } for pid=9339 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.407849][ T9372] bridge1: entered allmulticast mode [ 142.455836][ T9376] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 142.491220][ T9376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.522928][ T9376] veth9: entered promiscuous mode [ 142.529045][ T9376] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 143.089183][ T9405] bridge3: entered allmulticast mode [ 143.226977][ T9417] netlink: 'syz.3.1398': attribute type 72 has an invalid length. [ 143.325493][ T9422] veth0_vlan: left promiscuous mode [ 143.328204][ T9422] veth0_vlan: entered promiscuous mode [ 143.497440][ T9430] netlink: 'syz.2.1403': attribute type 16 has an invalid length. [ 143.500085][ T9430] netlink: 'syz.2.1403': attribute type 3 has an invalid length. [ 143.803331][ T9441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9441 comm=syz.1.1408 [ 144.288468][ T9453] tipc: Started in network mode [ 144.290232][ T9453] tipc: Node identity ac14140f, cluster identity 4711 [ 144.292455][ T9453] tipc: New replicast peer: 255.255.255.255 [ 144.295201][ T9453] tipc: Enabled bearer , priority 10 [ 144.298906][ T9453] __nla_validate_parse: 13 callbacks suppressed [ 144.298921][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 144.361019][ T9457] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 144.375734][ T9457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1415'. [ 144.381367][ T9457] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.402184][ T9457] veth13: entered promiscuous mode [ 144.407673][ T9457] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 144.539581][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 144.539596][ T40] audit: type=1400 audit(1743783200.640:359): avc: denied { create } for pid=9461 comm="syz.0.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 145.284820][ T57] tipc: Node number set to 2886997007 [ 145.396756][ T9484] tipc: Enabling of bearer rejected, already enabled [ 145.400388][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 145.425671][ T9486] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1428'. [ 145.736187][ T9509] tipc: Enabling of bearer rejected, already enabled [ 145.738972][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 145.792468][ T9513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1441'. [ 145.825014][ T40] audit: type=1400 audit(1743783201.930:360): avc: denied { create } for pid=9514 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.833893][ T40] audit: type=1400 audit(1743783201.930:361): avc: denied { getopt } for pid=9514 comm="syz.0.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.844966][ T9515] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 145.847407][ T9515] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 145.849604][ T9515] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1442'. [ 145.899932][ T9516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1442'. [ 145.906149][ T40] audit: type=1400 audit(1743783202.010:362): avc: denied { search } for pid=5337 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.020129][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1443'. [ 146.104015][ T9526] veth0_vlan: left promiscuous mode [ 146.107629][ T9526] veth0_vlan: entered promiscuous mode [ 146.147573][ T9533] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1450'. [ 146.249353][ T9546] bridge2: entered allmulticast mode [ 146.450583][ T9572] bridge4: entered allmulticast mode [ 146.505352][ T9585] tipc: Enabling of bearer rejected, already enabled [ 146.677189][ T9609] tipc: Started in network mode [ 146.679346][ T9609] tipc: Node identity ac14140f, cluster identity 4711 [ 146.682509][ T9609] tipc: New replicast peer: 255.255.255.255 [ 146.685799][ T9609] tipc: Enabled bearer , priority 10 [ 146.740022][ T40] audit: type=1400 audit(1743783202.840:363): avc: denied { connect } for pid=9601 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.083579][ T9656] syz_tun: entered allmulticast mode [ 147.087356][ T9655] syz_tun: left allmulticast mode [ 147.804818][ T57] tipc: Node number set to 2886997007 [ 147.907023][ T9703] siw: device registration error -23 [ 148.365956][ T9711] tipc: Enabling of bearer rejected, already enabled [ 148.728653][ T9758] tipc: Enabling of bearer rejected, already enabled [ 149.836421][ T9804] siw: device registration error -23 [ 150.527100][ T9852] __nla_validate_parse: 7 callbacks suppressed [ 150.527115][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1584'. [ 150.811134][ T9872] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 150.828903][ T9872] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 150.849748][ T9872] veth11: entered promiscuous mode [ 150.853214][ T9872] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 150.945897][ T9880] siw: device registration error -23 [ 151.455065][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'. [ 151.502037][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1605'. [ 151.534536][ T9903] tipc: Enabling of bearer rejected, already enabled [ 151.558797][ T9907] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 151.591939][ T9907] veth9: entered promiscuous mode [ 151.596105][ T9907] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 152.397221][ T9949] tipc: Enabling of bearer rejected, already enabled [ 152.455221][ T9957] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 152.502270][ T9957] veth15: entered promiscuous mode [ 152.506920][ T9957] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 152.697135][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 153.085240][ T40] audit: type=1400 audit(1743783209.180:364): avc: denied { block_suspend } for pid=9992 comm="syz.0.1649" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.146552][ T9998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1649'. [ 153.230869][T10001] siw: device registration error -23 [ 153.442356][ T40] audit: type=1400 audit(1743783209.540:365): avc: denied { nlmsg_read } for pid=10004 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 153.457357][ T40] audit: type=1400 audit(1743783209.550:366): avc: denied { ioctl } for pid=10004 comm="syz.2.1652" path="socket:[24386]" dev="sockfs" ino=24386 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.629480][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 153.996519][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 154.001383][T10031] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.079449][T10031] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.174335][T10031] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.251169][T10031] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.348000][T10031] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.359853][T10031] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.371698][T10031] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.380907][T10031] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.509664][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1672'. [ 154.513398][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1672'. [ 154.517155][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1672'. [ 154.988274][T10073] team0 (unregistering): Port device team_slave_0 removed [ 154.996222][T10073] team0 (unregistering): Port device team_slave_1 removed [ 155.005645][T10073] team0 (unregistering): Port device geneve0 removed [ 155.404452][T10104] bridge5: entered allmulticast mode [ 155.599313][T10131] bridge3: entered allmulticast mode [ 155.647531][T10137] bond0: entered promiscuous mode [ 155.649286][T10137] bond_slave_0: entered promiscuous mode [ 155.651204][T10137] bond_slave_1: entered promiscuous mode [ 155.653727][T10137] batadv0: entered promiscuous mode [ 155.658059][T10137] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 155.661027][T10137] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 155.664117][T10137] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.769683][T10157] bridge6: entered allmulticast mode [ 155.973738][T10195] __nla_validate_parse: 1 callbacks suppressed [ 155.973757][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1734'. [ 156.026199][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 156.031909][T10203] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.040449][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 156.048543][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.092532][T10205] bridge_slave_1 (unregistering): left allmulticast mode [ 156.095160][T10205] bridge_slave_1 (unregistering): left promiscuous mode [ 156.097591][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.145963][T10203] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.209962][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1746'. [ 156.212595][T10224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1746'. [ 156.232663][T10203] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.298323][T10203] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.380964][T10203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.391562][T10203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.397368][T10249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1756'. [ 156.405342][T10203] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.413957][T10203] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.596201][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 156.632151][T10275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1768'. [ 157.088267][T10300] bridge4: entered allmulticast mode [ 157.377345][T10329] bridge4: entered allmulticast mode [ 157.421750][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1796'. [ 157.612133][T10354] bridge7: entered allmulticast mode [ 157.779262][T10366] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 157.808502][T10366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.828039][T10366] veth11: entered promiscuous mode [ 157.831971][T10366] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 157.967743][T10380] bridge8: entered allmulticast mode [ 158.390685][T10419] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 158.425481][T10419] veth17: entered promiscuous mode [ 158.429442][T10419] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 158.463942][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 158.468460][T10427] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.483385][ T40] audit: type=1400 audit(1743783214.580:367): avc: denied { create } for pid=10429 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.492874][ T40] audit: type=1400 audit(1743783214.590:368): avc: denied { connect } for pid=10429 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.509960][ T40] audit: type=1400 audit(1743783214.590:369): avc: denied { write } for pid=10429 comm="syz.0.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.528154][T10427] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.589118][T10427] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.648323][T10427] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.759336][T10427] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.769230][T10427] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.780880][T10427] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.804482][T10427] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.841205][T10477] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 159.881688][T10477] veth15: entered promiscuous mode [ 159.886201][T10477] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 160.582620][T10502] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 160.631431][T10502] veth17: entered promiscuous mode [ 160.635136][T10502] bond7: (slave veth17): Enslaving as a backup interface with a down link [ 161.296370][ T40] audit: type=1400 audit(1743783217.400:370): avc: denied { setopt } for pid=10529 comm="syz.1.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.708514][T10562] __nla_validate_parse: 4 callbacks suppressed [ 161.708526][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1895'. [ 161.712899][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1895'. [ 161.715487][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1895'. [ 161.718026][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1895'. [ 161.881291][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 161.883792][T10570] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1899'. [ 162.467529][ T40] audit: type=1400 audit(1743783218.570:371): avc: denied { getopt } for pid=10595 comm="syz.3.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 162.487469][T10602] Bluetooth: MGMT ver 1.23 [ 162.559586][T10610] netlink: 'syz.2.1916': attribute type 72 has an invalid length. [ 162.657808][T10621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1921'. [ 162.660362][T10621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1921'. [ 162.662956][T10621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1921'. [ 162.666270][T10621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1921'. [ 163.239492][T10650] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 163.276609][T10650] veth13: entered promiscuous mode [ 163.279710][T10650] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 164.726761][T10744] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.777534][T10744] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.857732][T10744] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.908726][T10744] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.991926][T10744] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.999619][T10744] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.011077][T10744] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.018851][T10744] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.366610][T10771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.461421][T10776] lo speed is unknown, defaulting to 1000 [ 165.463287][T10776] lo speed is unknown, defaulting to 1000 [ 165.465738][T10776] lo speed is unknown, defaulting to 1000 [ 165.470035][T10771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.474069][T10776] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.486487][T10776] lo speed is unknown, defaulting to 1000 [ 165.489073][T10776] lo speed is unknown, defaulting to 1000 [ 165.496090][T10776] lo speed is unknown, defaulting to 1000 [ 165.498783][T10776] lo speed is unknown, defaulting to 1000 [ 165.618356][T10771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.697091][T10771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.772653][T10771] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.779103][T10771] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.785207][T10771] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.791413][T10771] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.296885][ T40] audit: type=1400 audit(1743783222.400:372): avc: denied { nlmsg_read } for pid=10791 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 166.743674][T10811] lo speed is unknown, defaulting to 1000 [ 167.046954][T10826] __nla_validate_parse: 7 callbacks suppressed [ 167.046969][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 167.051708][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 167.250494][T10840] lo speed is unknown, defaulting to 1000 [ 167.529126][T10851] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 167.549131][T10851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.567491][T10851] veth15: entered promiscuous mode [ 167.859200][T10869] siw: device registration error -23 [ 167.975848][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2028'. [ 167.978423][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2028'. [ 167.980986][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2028'. [ 167.983643][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2028'. [ 169.228577][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 169.560199][T10914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 169.562872][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 169.565652][T10914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2043'. [ 170.398971][T10940] bridge5: entered allmulticast mode [ 170.997806][T10961] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 171.022776][T10961] 8021q: adding VLAN 0 to HW filter on device bond8 [ 171.545845][T10989] lo speed is unknown, defaulting to 1000 [ 171.643385][ T40] audit: type=1400 audit(1743783227.740:373): avc: denied { accept } for pid=10988 comm="syz.3.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.650718][ T40] audit: type=1400 audit(1743783227.740:374): avc: denied { write } for pid=10988 comm="syz.3.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.826018][T10996] bridge6: entered allmulticast mode [ 171.857249][T10998] netlink: 'syz.3.2078': attribute type 1 has an invalid length. [ 171.872903][T10998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.319561][T11018] lo speed is unknown, defaulting to 1000 [ 172.418035][T11018] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 172.546246][T11026] lo speed is unknown, defaulting to 1000 [ 172.599076][ T40] audit: type=1400 audit(1743783228.700:375): avc: denied { connect } for pid=11030 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.132742][T11082] bridge5: entered allmulticast mode [ 173.210857][T11092] __nla_validate_parse: 5 callbacks suppressed [ 173.210875][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2120'. [ 173.541057][T11104] bridge3: entered allmulticast mode [ 173.578011][T11106] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 173.598044][T11106] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.728155][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2129'. [ 173.894183][T11121] lo speed is unknown, defaulting to 1000 [ 173.972469][ T40] audit: type=1400 audit(1743783230.070:376): avc: denied { read } for pid=11129 comm="syz.1.2136" path="socket:[29573]" dev="sockfs" ino=29573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.125395][T11145] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 174.142360][T11145] 8021q: adding VLAN 0 to HW filter on device bond9 [ 175.220300][T11192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2163'. [ 175.230043][ T105] IPVS: starting estimator thread 0... [ 175.236026][T11192] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2163'. [ 175.240867][T11196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2165'. [ 175.337160][T11194] IPVS: using max 44 ests per chain, 105600 per kthread [ 175.445674][T11222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2176'. [ 175.475818][ T40] audit: type=1400 audit(1743783231.570:377): avc: denied { create } for pid=11227 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.481723][ T40] audit: type=1400 audit(1743783231.580:378): avc: denied { ioctl } for pid=11227 comm="syz.2.2180" path="socket:[31201]" dev="sockfs" ino=31201 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.500520][T11231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2181'. [ 175.503755][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2181'. [ 175.510411][T11231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2181'. [ 175.512886][T11231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2181'. [ 175.555408][T11235] netlink: 'syz.3.2182': attribute type 10 has an invalid length. [ 175.993016][T11270] lo speed is unknown, defaulting to 1000 [ 176.250627][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.253916][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.258301][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.262605][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.266578][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.274020][ T40] audit: type=1400 audit(1743783232.370:379): avc: denied { mounton } for pid=11286 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 176.291678][T11286] lo speed is unknown, defaulting to 1000 [ 176.374070][T11286] chnl_net:caif_netlink_parms(): no params data found [ 176.429873][T11294] lo speed is unknown, defaulting to 1000 [ 176.468598][T11286] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.470724][T11286] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.472877][T11286] bridge_slave_0: entered allmulticast mode [ 176.475417][T11286] bridge_slave_0: entered promiscuous mode [ 176.484872][T11286] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.487555][T11286] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.490184][T11286] bridge_slave_1: entered allmulticast mode [ 176.493255][T11286] bridge_slave_1: entered promiscuous mode [ 176.531335][T11286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.536828][T11286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.594088][T11286] team0: Port device team_slave_0 added [ 176.598085][T11286] team0: Port device team_slave_1 added [ 176.631687][T11308] bridge4: entered allmulticast mode [ 176.634511][T11286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.637616][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.645420][T11286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.649356][T11286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.651442][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.658709][T11286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.692727][T11310] hsr0: entered promiscuous mode [ 176.696729][T11286] hsr_slave_0: entered promiscuous mode [ 176.698760][T11286] hsr_slave_1: entered promiscuous mode [ 176.700598][T11286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.702719][T11286] Cannot create hsr debugfs directory [ 176.707661][T11310] hsr_slave_0: left promiscuous mode [ 176.709709][T11310] hsr_slave_1: left promiscuous mode [ 176.717873][T11310] hsr0 (unregistering): left promiscuous mode [ 176.796673][T11314] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 176.813541][T11286] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.824177][T11314] 8021q: adding VLAN 0 to HW filter on device bond9 [ 176.893219][T11286] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.999376][T11286] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.080396][T11325] lo speed is unknown, defaulting to 1000 [ 177.093119][T11286] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.277761][T11286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.283376][T11286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.290746][T11286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.297826][T11286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.301862][T11333] lo speed is unknown, defaulting to 1000 [ 177.370407][T11286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.388306][T11286] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.395696][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.398259][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.406381][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.408481][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.543115][T11345] bridge7: entered allmulticast mode [ 177.579813][T11286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.611180][T11286] veth0_vlan: entered promiscuous mode [ 177.617783][T11286] veth1_vlan: entered promiscuous mode [ 177.637857][T11286] veth0_macvtap: entered promiscuous mode [ 177.643898][T11286] veth1_macvtap: entered promiscuous mode [ 177.658683][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.661729][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.664534][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.668768][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.672460][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.676487][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.681343][T11286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.695368][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.699312][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.702468][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.706234][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.708957][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.712819][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.721172][T11286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.731910][T11286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.734900][T11286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.738319][T11286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.741546][T11286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.807695][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.810545][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.839815][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.842044][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.849362][ T40] audit: type=1400 audit(1743783233.950:380): avc: denied { mount } for pid=11286 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.861770][ T40] audit: type=1400 audit(1743783233.950:381): avc: denied { mounton } for pid=11286 comm="syz-executor" path="/syzkaller.IKf1hJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 177.873168][ T40] audit: type=1400 audit(1743783233.960:382): avc: denied { mount } for pid=11286 comm="syz-executor" name="/" dev="gadgetfs" ino=9348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 178.294905][ T5948] Bluetooth: hci1: command tx timeout [ 178.396418][ T40] audit: type=1400 audit(1743783234.500:383): avc: denied { name_connect } for pid=11382 comm="syz.0.2240" dest=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 179.287275][T11398] __nla_validate_parse: 5 callbacks suppressed [ 179.287286][T11398] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2245'. [ 179.599691][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.603763][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.609375][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.613908][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.616968][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.649723][T11411] lo speed is unknown, defaulting to 1000 [ 179.757604][T11411] chnl_net:caif_netlink_parms(): no params data found [ 179.849060][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.851369][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.856084][T11411] bridge_slave_0: entered allmulticast mode [ 179.858866][T11411] bridge_slave_0: entered promiscuous mode [ 179.861922][T11411] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.864142][T11411] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.867333][T11411] bridge_slave_1: entered allmulticast mode [ 179.869895][T11411] bridge_slave_1: entered promiscuous mode [ 179.887269][T11435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 179.940334][T11411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.944384][T11411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.955367][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 180.022307][T11439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.038051][T11411] team0: Port device team_slave_0 added [ 180.042624][T11411] team0: Port device team_slave_1 added [ 180.076313][T11411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.078263][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.085619][T11411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.089461][T11411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.091389][T11411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.099384][T11411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.145494][T11411] hsr_slave_0: entered promiscuous mode [ 180.148954][T11411] hsr_slave_1: entered promiscuous mode [ 180.150960][T11411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.153158][T11411] Cannot create hsr debugfs directory [ 180.384896][ T5940] Bluetooth: hci1: command tx timeout [ 180.483813][T11449] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2264'. [ 180.683515][T11411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.690760][T11411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.696990][T11411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.702659][T11411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.770182][T11411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.781321][T11411] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.789431][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.792430][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.801620][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.803745][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.823729][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.934144][T11411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.963016][T11411] veth0_vlan: entered promiscuous mode [ 180.970200][T11411] veth1_vlan: entered promiscuous mode [ 180.991591][T11411] veth0_macvtap: entered promiscuous mode [ 180.996872][T11411] veth1_macvtap: entered promiscuous mode [ 181.028716][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.031628][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.034299][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.038016][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.040686][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.043658][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.047510][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.051552][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.056395][T11411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.063558][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.067079][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.069682][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.072581][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.075893][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.079856][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.083701][T11411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.087847][T11411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.093028][T11411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.100896][T11411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.104365][T11411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.108113][T11411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.111997][T11411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.157103][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.159431][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.180039][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.182192][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.394213][T11487] siw: device registration error -23 [ 181.456021][T11439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.511723][T11439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.586530][ T40] audit: type=1400 audit(1743783237.690:384): avc: denied { read } for pid=11496 comm="syz.2.2282" path="socket:[32733]" dev="sockfs" ino=32733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.586715][T11439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.642880][ T40] audit: type=1400 audit(1743783237.740:385): avc: denied { name_connect } for pid=11496 comm="syz.2.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 181.648964][ T40] audit: type=1400 audit(1743783237.750:386): avc: denied { accept } for pid=11496 comm="syz.2.2282" lport=38508 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.655530][ T5940] Bluetooth: hci3: command tx timeout [ 181.658736][ T40] audit: type=1400 audit(1743783237.750:387): avc: denied { setopt } for pid=11496 comm="syz.2.2282" lport=38508 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 181.690110][T11439] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.700978][T11439] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.712113][T11439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.725215][T11439] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.818814][T11500] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.821408][T11500] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.823955][T11500] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.827323][T11500] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.841885][ T40] audit: type=1400 audit(1743783237.940:388): avc: denied { search } for pid=5655 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.848315][ T40] audit: type=1400 audit(1743783237.940:389): avc: denied { read } for pid=5655 comm="dhcpcd" name="n103" dev="tmpfs" ino=2982 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.935585][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'. [ 182.206665][T11538] lo speed is unknown, defaulting to 1000 [ 182.311691][T11549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2295'. [ 182.314208][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2295'. [ 182.318568][T11549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2295'. [ 182.321647][T11549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2295'. [ 182.456773][ T5940] Bluetooth: hci1: command tx timeout [ 182.864522][T11605] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2321'. [ 182.871714][T11605] veth1_to_bond: entered allmulticast mode [ 182.873461][T11605] veth1_to_bond: entered promiscuous mode [ 182.875287][T11605] veth1_to_bond: left promiscuous mode [ 182.876941][T11605] veth1_to_bond: left allmulticast mode [ 182.889833][T11607] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2322'. [ 183.618924][T11653] siw: device registration error -23 [ 183.734955][ T5940] Bluetooth: hci3: command tx timeout [ 183.828972][T11663] bridge_slave_0: left allmulticast mode [ 183.831536][T11663] bridge_slave_0: left promiscuous mode [ 183.834299][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.839339][T11663] bridge_slave_1: left allmulticast mode [ 183.840891][T11663] bridge_slave_1: left promiscuous mode [ 183.842491][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.851697][T11663] bond0: (slave bond_slave_0): Releasing backup interface [ 183.860140][T11663] bond0: (slave bond_slave_1): Releasing backup interface [ 183.872126][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 183.872136][ T40] audit: type=1400 audit(1743783239.970:402): avc: denied { accept } for pid=11662 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 183.877893][T11663] team0: Port device team_slave_0 removed [ 183.890527][T11663] team0: Port device team_slave_1 removed [ 183.892785][T11663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.895255][T11663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.899215][T11663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.901308][T11663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.979244][ T40] audit: type=1400 audit(1743783240.080:403): avc: denied { setrlimit } for pid=11674 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 184.088011][T11679] netlink: 'syz.1.2351': attribute type 72 has an invalid length. [ 184.300492][T11695] __nla_validate_parse: 4 callbacks suppressed [ 184.300504][T11695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2357'. [ 184.545019][ T5940] Bluetooth: hci1: command tx timeout [ 185.152863][T11712] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2364'. [ 185.156847][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 185.159899][T11712] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2364'. [ 185.162548][T11712] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2364'. [ 185.176892][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2366'. [ 185.277807][ T40] audit: type=1400 audit(1743783241.380:404): avc: denied { read } for pid=11719 comm="syz.3.2369" laddr=127.0.0.1 lport=39950 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 185.542453][T11754] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 185.824914][ T5940] Bluetooth: hci3: command tx timeout [ 186.193390][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2402'. [ 186.206580][T11794] siw: device registration error -23 [ 186.223370][T11793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.281916][T11793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.367253][T11793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.440595][T11793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.519301][T11793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.528217][T11793] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.535882][T11793] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.545820][T11793] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.329694][T11835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2419'. [ 187.337439][T11834] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2418'. [ 187.378280][T11830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.473357][T11846] @ÿ: renamed from veth0_vlan (while UP) [ 187.479786][ T40] audit: type=1400 audit(1743783243.580:405): avc: denied { getopt } for pid=11845 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.629840][T11856] [ 187.630924][T11856] ====================================================== [ 187.633628][T11856] WARNING: possible circular locking dependency detected [ 187.636185][T11856] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted [ 187.639416][T11856] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.642907][T11856] syz.0.2429/11856 is trying to acquire lock: [ 187.645374][T11856] ffffffff9012b2a8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf6/0x3240 [ 187.648320][T11856] [ 187.648320][T11856] but task is already holding lock: [ 187.650513][T11856] ffff888050200aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 187.654047][T11856] [ 187.654047][T11856] which lock already depends on the new lock. [ 187.654047][T11856] [ 187.656926][T11856] [ 187.656926][T11856] the existing dependency chain (in reverse order) is: [ 187.659750][T11856] [ 187.659750][T11856] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 187.662186][T11856] __mutex_lock+0x199/0xb90 [ 187.664029][T11856] smc_switch_to_fallback+0x2d/0x9f0 [ 187.666086][T11856] smc_sendmsg+0x13d/0x520 [ 187.667934][T11856] __sys_sendto+0x495/0x510 [ 187.669861][T11856] __x64_sys_sendto+0xe0/0x1c0 [ 187.671874][T11856] do_syscall_64+0xcd/0x260 [ 187.673734][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.676185][T11856] [ 187.676185][T11856] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 187.678812][T11856] lock_sock_nested+0x41/0xf0 [ 187.680275][T11856] sockopt_lock_sock+0x54/0x70 [ 187.681734][T11856] do_ip_setsockopt+0xfe/0x3240 [ 187.683225][T11856] ip_setsockopt+0x59/0xf0 [ 187.684782][T11856] tcp_setsockopt+0xa4/0x100 [ 187.686626][T11856] do_sock_setsockopt+0x221/0x470 [ 187.688564][T11856] __sys_setsockopt+0x1a0/0x230 [ 187.690446][T11856] __x64_sys_setsockopt+0xbd/0x160 [ 187.692429][T11856] do_syscall_64+0xcd/0x260 [ 187.694150][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.696158][T11856] [ 187.696158][T11856] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 187.698773][T11856] __lock_acquire+0x1173/0x1ba0 [ 187.700675][T11856] lock_acquire+0x179/0x350 [ 187.702736][T11856] __mutex_lock+0x199/0xb90 [ 187.704799][T11856] do_ip_setsockopt+0xf6/0x3240 [ 187.706832][T11856] ip_setsockopt+0x59/0xf0 [ 187.708743][T11856] tcp_setsockopt+0xa4/0x100 [ 187.710681][T11856] smc_setsockopt+0x1b3/0xa00 [ 187.712618][T11856] do_sock_setsockopt+0x221/0x470 [ 187.714561][T11856] __sys_setsockopt+0x1a0/0x230 [ 187.716549][T11856] __x64_sys_setsockopt+0xbd/0x160 [ 187.718591][T11856] do_syscall_64+0xcd/0x260 [ 187.720563][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.723017][T11856] [ 187.723017][T11856] other info that might help us debug this: [ 187.723017][T11856] [ 187.726965][T11856] Chain exists of: [ 187.726965][T11856] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 187.726965][T11856] [ 187.731832][T11856] Possible unsafe locking scenario: [ 187.731832][T11856] [ 187.734481][T11856] CPU0 CPU1 [ 187.736373][T11856] ---- ---- [ 187.738438][T11856] lock(&smc->clcsock_release_lock); [ 187.740432][T11856] lock(sk_lock-AF_INET); [ 187.743047][T11856] lock(&smc->clcsock_release_lock); [ 187.745965][T11856] lock(rtnl_mutex); [ 187.747499][T11856] [ 187.747499][T11856] *** DEADLOCK *** [ 187.747499][T11856] [ 187.750412][T11856] 1 lock held by syz.0.2429/11856: [ 187.752246][T11856] #0: ffff888050200aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 187.756128][T11856] [ 187.756128][T11856] stack backtrace: [ 187.758147][T11856] CPU: 0 UID: 0 PID: 11856 Comm: syz.0.2429 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 187.758169][T11856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.758181][T11856] Call Trace: [ 187.758187][T11856] [ 187.758194][T11856] dump_stack_lvl+0x116/0x1f0 [ 187.758216][T11856] print_circular_bug+0x275/0x350 [ 187.758245][T11856] check_noncircular+0x14c/0x170 [ 187.758267][T11856] ? psi_task_switch+0x201/0x8e0 [ 187.758292][T11856] __lock_acquire+0x1173/0x1ba0 [ 187.758309][T11856] lock_acquire+0x179/0x350 [ 187.758344][T11856] ? do_ip_setsockopt+0xf6/0x3240 [ 187.758370][T11856] ? __pfx___might_resched+0x10/0x10 [ 187.758397][T11856] __mutex_lock+0x199/0xb90 [ 187.758419][T11856] ? do_ip_setsockopt+0xf6/0x3240 [ 187.758450][T11856] ? __lock_acquire+0x5ca/0x1ba0 [ 187.758462][T11856] ? do_ip_setsockopt+0xf6/0x3240 [ 187.758486][T11856] ? __pfx___mutex_lock+0x10/0x10 [ 187.758511][T11856] ? __mutex_trylock_common+0xe9/0x250 [ 187.758529][T11856] ? do_ip_setsockopt+0xf6/0x3240 [ 187.758553][T11856] ? rtnl_lock+0x9/0x20 [ 187.758576][T11856] do_ip_setsockopt+0xf6/0x3240 [ 187.758603][T11856] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 187.758626][T11856] ? __mutex_lock+0x1ca/0xb90 [ 187.758644][T11856] ? avc_has_perm+0x11a/0x1c0 [ 187.758659][T11856] ? __pfx_avc_has_perm+0x10/0x10 [ 187.758672][T11856] ? smc_setsockopt+0x100/0xa00 [ 187.758695][T11856] ? __pfx___mutex_lock+0x10/0x10 [ 187.758714][T11856] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.758730][T11856] ip_setsockopt+0x59/0xf0 [ 187.758753][T11856] tcp_setsockopt+0xa4/0x100 [ 187.758770][T11856] smc_setsockopt+0x1b3/0xa00 [ 187.758792][T11856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 187.758816][T11856] ? __pfx_smc_setsockopt+0x10/0x10 [ 187.758841][T11856] ? selinux_socket_setsockopt+0x6a/0x80 [ 187.758860][T11856] ? __pfx_smc_setsockopt+0x10/0x10 [ 187.758884][T11856] do_sock_setsockopt+0x221/0x470 [ 187.758905][T11856] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 187.758932][T11856] __sys_setsockopt+0x1a0/0x230 [ 187.758950][T11856] __x64_sys_setsockopt+0xbd/0x160 [ 187.758967][T11856] ? do_syscall_64+0x91/0x260 [ 187.758987][T11856] ? lockdep_hardirqs_on+0x7c/0x110 [ 187.759005][T11856] do_syscall_64+0xcd/0x260 [ 187.759024][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.759040][T11856] RIP: 0033:0x7f448b78d169 [ 187.759053][T11856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.759067][T11856] RSP: 002b:00007f448c687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.759083][T11856] RAX: ffffffffffffffda RBX: 00007f448b9a5fa0 RCX: 00007f448b78d169 [ 187.759093][T11856] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 187.759103][T11856] RBP: 00007f448b80e2a0 R08: 0000000000000088 R09: 0000000000000000 [ 187.759111][T11856] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 187.759120][T11856] R13: 0000000000000000 R14: 00007f448b9a5fa0 R15: 00007ffc8da611f8 [ 187.759134][T11856] [ 187.857315][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 187.895223][ T5940] Bluetooth: hci3: command tx timeout [ 188.171159][ T1145] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.173831][ T1145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.257611][ T1145] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.260483][ T1145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.386256][ T1145] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.389905][ T1145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.465903][ T1145] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.468959][ T1145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.707566][ T1145] bond0 (unregistering): Released all slaves [ 189.041974][ T1145] hsr_slave_0: left promiscuous mode [ 189.043976][ T1145] hsr_slave_1: left promiscuous mode [ 189.046826][ T1145] veth1_macvtap: left promiscuous mode [ 189.048383][ T1145] veth0_macvtap: left promiscuous mode [ 189.049933][ T1145] veth1_vlan: left promiscuous mode [ 189.051436][ T1145] @ÿ: left promiscuous mode [ 192.695023][ T1182] wlan1: Trigger new scan to find an IBSS to join [ 193.595374][ T78] wlan1: Creating new IBSS network, BSSID ca:77:e9:3c:26:74 VM DIAGNOSIS: 16:14:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854de305 RDI=ffffffff9ae224a0 RBP=ffffffff9ae22460 RSP=ffffc9000d4672d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e34312e36 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9ae22460 R15=ffffffff854de2a0 RIP=ffffffff854de32f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f448c6876c0 ffffffff 00c00000 GS =0000 ffff8880d69b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f448c686f98 CR3=0000000025752000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b97c488 00007f448b97c480 00007f448b97c478 00007f448b97c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448c4dd100 00007f448b97c440 00007f448b97c458 00007f448b97c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b97c498 00007f448b97c490 00007f448b97c488 00007f448b97c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000002 RDX=1ffff920007d0e2c RSI=0000000000000000 RDI=ffffffff8dcf9d08 RBP=ffffc90003e87158 RSP=ffffc90003e870a0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90003e87110 R11=0000000000010ace R12=ffffc90003e87160 R13=ffffc90003e87110 R14=0000000000000000 R15=ffff888028c42440 RIP=ffffffff8169da5d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0e838d7d60 CR3=000000002a3ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb108e470 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffffff8e3c1580 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8bf45f80 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc90020e27418 R8 =0000000000000000 R9 =0000000000000000 R10=ffffea000107a207 R11=000000000001053f R12=ffffffff82287b27 R13=ffffed1004985c49 R14=ffffffff8228de60 R15=ffff8880503a5800 RIP=ffffffff819819fe RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f319c7706c0 ffffffff 00c00000 GS =0000 ffff8880d6bb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f319c76ff98 CR3=0000000036054000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319ba0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319bb7c488 00007f319bb7c480 00007f319bb7c478 00007f319bb7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319c6dd100 00007f319bb7c440 00007f319bb7c458 00007f319bb7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f319bb7c498 00007f319bb7c490 00007f319bb7c488 00007f319bb7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000f4240 RBX=dffffc0000000000 RCX=ffffffff89061b57 RDX=ffff88801de98000 RSI=ffffffff89061de9 RDI=0000000000000006 RBP=ffff88802346c108 RSP=ffffc900006f8cf8 R8 =0000000000000006 R9 =00000000000f4240 R10=00000000000f4240 R11=ffff88802346c0d0 R12=ffff888050b84200 R13=000000000000000a R14=00000000000f4240 R15=ffff888050b84288 RIP=ffffffff81bb40e0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555608f4808 CR3=0000000046584000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8da61580 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000